tidewaterdirect[.]com[.]techphone[.]techphone[.]tec[.]br

Tidewaterdirect.com.techphone is actively involved in an Airdrop Scam, impersonating a BTC airdrop with a $100 reward for active traders. This domain is flagged by 8 out of 91 vendors on VirusTotal, indicating significant malicious activity. It is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL.

The domain, created on September 3, 2020, operates under the radar with no identifiable registrar, which adds a layer of anonymity for the perpetrators. Hosted on IP 177.11.50.172 in Brazil, the domain is linked to AS53243 Brasil Site Informatica LTDA. The SSL certificate is issued by Let's Encrypt, a common choice for scam sites due to its free and automated nature.

Despite being active for several years, the domain's recent detection by PhishDestroy on June 14, 2026, highlights its ongoing threat. The platform risk score of 80/100 underscores the high potential for harm. Airdrop scams like this exploit the allure of free cryptocurrency to deceive users into divulging sensitive information or transferring funds under false pretenses.

The use of a phishing kit tailored for Airdrop Scams suggests a sophisticated operation aimed at cryptocurrency enthusiasts. The domain's presence on multiple blocklists indicates a concerted effort by security vendors to mitigate its impact. However, the persistent activity of such scams highlights the need for continuous vigilance in the cybersecurity landscape.